IN THE CLAIMS 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1.-12. (Cancelled), 

13. (Previously presented) A method of providing security in a computer system 
having a client, an application server, an application component, a resource adapter and a 
principal mapping module, and a subject instance having the method comprising the steps of: 

invoking a connection request method by the application component on the resource 
adapter without passing in any security arguments; 

the resource adapter passes the connection request to the application server via a 
connection factory; 

the application server is configured to use the principal mapping module such that the 
principal mapping module takes the subject instance with a caller principal and returns the 
subject instance with a valid resource principal and password credential instance to the 
application server; and 

establishing a managed connection between the application server and an enterprise 
information system using the valid resource principal and password credential instance 
generated by the principle mapping module. 

14. (Cancelled) 

15. (New) The method of claim 13, wherein said security includes a security 
context that contains support for Java authentication and authorization service based 
pluggable authentication. 
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16. (New) The method of claim 13, further comprising a generic credential 
interface. 

17. (New) The method of claim 13, further comprising a security principal 
interface. 

18. (New) The method of claim 13, wherein the managed connection includes a 
security contract data structure including: 

a subject class; 

a generic credential interface; 

a password credential interface; and 

a Java security principal interface. 

19. (New) The method of claim 13, wherein the security is propagated from said 
application server to the resource adapter. 
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